Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c8a98346-6073-4789-bd98-b376750a1301/1/326130613a363034343a373830303a3a2f34302d3438203d3e20313939363832.roa
File: 326130613a363034343a373830303a3a2f34302d3438203d3e20313939363832.roa (raw, json)
Hash identifier: AX3GPdLI+M0CtmaXKqmeW1/ZgwTDoArRUGIOCNOzJQQ=
Subject key identifier: B0:AE:C8:11:A2:1F:72:5E:A8:84:3A:5C:A9:0B:24:56:1B:26:AA:48
Certificate issuer: /CN=20F72F3CC9DF8FB0CAAB1063442537DE31C203A3
Certificate serial: 406777A33543C1EE647B272D53263CAF234924BC
Authority key identifier: 20:F7:2F:3C:C9:DF:8F:B0:CA:AB:10:63:44:25:37:DE:31:C2:03:A3
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/20F72F3CC9DF8FB0CAAB1063442537DE31C203A3.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c8a98346-6073-4789-bd98-b376750a1301/1/326130613a363034343a373830303a3a2f34302d3438203d3e20313939363832.roa
Signing time: Fri 02 Feb 2024 08:23:51 +0000
ROA not before: Fri 02 Feb 2024 08:18:51 +0000
ROA not after: Fri 31 Jan 2025 08:23:51 +0000
asID: 199682
IP address blocks: 2a0a:6044:7800::/40 maxlen: 48
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:67:77:a3:35:43:c1:ee:64:7b:27:2d:53:26:3c:af:23:49:24:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20F72F3CC9DF8FB0CAAB1063442537DE31C203A3
Validity
Not Before: Feb 2 08:18:51 2024 GMT
Not After : Jan 31 08:23:51 2025 GMT
Subject: CN=B0AEC811A21F725EA8843A5CA90B24561B26AA48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:d7:0e:11:4b:e5:57:d9:d9:40:15:d7:ea:c7:
2e:ef:23:81:25:ec:87:5d:7d:2c:34:f4:ce:58:b5:
12:df:56:7a:82:e5:64:4c:69:e4:da:78:fc:17:8f:
3d:f0:a1:71:8f:8b:51:8d:2a:d6:5c:ad:6b:6c:ee:
b5:80:37:ef:9c:8d:58:7b:ac:56:47:8d:a6:ea:6b:
7b:5f:28:1e:24:5a:be:46:fa:d5:b9:f6:97:41:21:
64:33:31:15:a4:49:0c:94:a8:9c:4b:7d:d2:a7:73:
2f:e9:3b:4c:19:d8:ab:ce:de:45:e2:a1:d9:33:f8:
4c:d5:d5:2b:08:c9:30:33:bd:6c:e1:a1:9f:76:bd:
81:b0:66:bb:b1:23:91:ee:5c:e4:21:66:0a:60:fb:
65:90:2a:62:b3:43:e3:88:f2:95:0d:76:a4:e9:2d:
c4:97:3c:86:40:71:be:54:c7:ee:e0:3e:0f:3a:51:
a7:fe:4d:9a:c0:d6:c0:eb:c2:54:3b:10:38:e8:3e:
3c:4d:34:f8:71:8e:85:20:f6:b1:9c:8a:bd:1c:91:
14:dc:89:b2:76:12:4b:ce:4f:f4:4d:a3:77:0d:bb:
d2:de:11:3f:62:21:f2:bd:bf:7f:22:07:6d:e4:17:
f8:63:74:6a:da:2f:15:cd:d3:57:a7:e3:0b:83:1e:
20:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:AE:C8:11:A2:1F:72:5E:A8:84:3A:5C:A9:0B:24:56:1B:26:AA:48
X509v3 Authority Key Identifier:
keyid:20:F7:2F:3C:C9:DF:8F:B0:CA:AB:10:63:44:25:37:DE:31:C2:03:A3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c8a98346-6073-4789-bd98-b376750a1301/1/20F72F3CC9DF8FB0CAAB1063442537DE31C203A3.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/20F72F3CC9DF8FB0CAAB1063442537DE31C203A3.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c8a98346-6073-4789-bd98-b376750a1301/1/326130613a363034343a373830303a3a2f34302d3438203d3e20313939363832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:6044:7800::/40
Signature Algorithm: sha256WithRSAEncryption
05:df:1e:9e:7c:32:19:03:28:bb:9b:9f:e4:ce:82:19:18:ff:
a9:0d:04:b0:4b:a6:36:27:d5:1b:45:55:94:5a:8d:00:f9:86:
71:0c:b7:e7:ba:f4:ab:9c:b2:79:96:f4:51:ef:f0:1f:15:10:
09:ad:e5:84:8f:8f:3e:27:38:85:49:96:77:f9:b0:66:2f:7f:
4c:70:bf:31:5a:74:9e:09:32:e6:64:cf:17:1d:75:6c:f9:33:
74:81:a3:38:c7:88:1b:86:66:83:ca:b8:be:26:f5:7d:b9:42:
2f:55:ac:b8:50:98:eb:90:1d:51:86:ac:c7:f2:1a:5b:6c:a0:
10:26:8e:21:64:e0:06:d8:3c:b9:57:37:24:0d:21:67:1b:95:
7b:2a:96:a4:0f:59:62:3f:e5:32:ea:3f:e0:1e:92:35:30:b1:
01:81:90:f2:31:d4:d6:24:f0:61:40:db:f7:0e:2b:0f:30:a3:
da:81:d9:fc:00:bf:32:6c:1a:5c:08:22:5b:68:e1:c6:e9:ed:
be:71:6d:89:87:f6:de:15:7e:1b:75:2c:d1:30:cc:fd:21:56:
c7:f2:45:95:8e:12:5f:d7:d3:64:cd:a2:85:c3:66:b6:ae:4a:
fd:05:da:be:b8:36:b0:8a:4d:ac:26:b0:d7:32:80:4c:85:b9:
ab:4a:38:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:19 2024 by rpki-client on console-fra.rpki-client.org